Principal Cyber Security Architect

Job Description - Cyber Security Architect:

Role Overview:

We are looking for a highly experienced Principal Cyber Security Architect to lead a comprehensive forensic architecture review, identify security vulnerabilities, investigate potential threats, and drive complete security remediation and hardening of our product.

The individual will work closely with the STAH team (4 members), providing hands-on technical leadership and clear guidance to developers and DevOps engineers with limited cybersecurity experience.

Key Responsibilities:

• Lead forensic architecture reviews and comprehensive security assessments of the product.
• Identify vulnerabilities, security gaps, potential breaches, and infrastructure misconfigurations.
• Conduct root cause analysis and recommend appropriate remediation.
• Review and strengthen product, application, network, and cloud security architecture.
• Lead AWS security assessments, particularly AWS WAF, IAM, VPC, and infrastructure security.
• Review, configure, and optimize CrowdStrike XDR and Palo Alto Cortex XDR.
• Guide the team through vulnerability remediation, incident response, and product hardening.
• Provide clear, step-by-step technical instructions to developers and DevOps engineers.
• Validate implemented security fixes and ensure issues are resolved.
• Establish security best practices, monitoring, and incident response procedures.

Mandatory Technical Expertise:

• CrowdStrike Falcon / XDR
• Palo Alto Cortex XDR
• AWS Cloud Security and AWS WAF
• Application, API, Network, and Infrastructure Security
• Digital Forensics and Incident Response
• Vulnerability Assessment and Remediation
• IAM, Access Management, and Cloud Infrastructure Hardening
• DevSecOps and Secure Architecture

Experience & Qualifications:

• 15+ years of cybersecurity / information security experience.
• Proven experience as a Principal Cyber Security Architect, Security Consultant, or equivalent senior professional.
• Strong hands-on expertise in enterprise security architecture and forensic investigations.
• Demonstrated experience leading security remediation and product hardening initiatives.
• CISSP, CISM, CCSP, AWS Security Specialty or equivalent certifications preferred.

Desired Leadership Qualities:

• Mature, calm, and highly experienced technical leader.
• Patient mentor who can guide junior developers and DevOps engineers.
• Able to translate complex security issues into simple, actionable instructions.
• Hands-on problem solver rather than purely an advisory consultant.
• Strong ownership and accountability to drive issues to complete resolution.

Skills

AWS, Cortex, CrowdStrike, DFIR, DevSecOps, Falcon, Forensics, Hardening, IAM, Remediation, VPC, WAF, XDR